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AMENDMENTS TO THE CLAIMS 
This listing of claims replaces all prior versions, and listings, of claims in the application: 

1 1.-9. (Cancelled) 

1 10. (Previously Presented) A method for maintaining secure network connections, the 

2 method comprising: 

3 duplicating, at a third network element, a security association associated with a secure 

4 network connection between a first network element and a second network element, wherein a 

5 lookup of the security association associated with the secure network connection is not 

6 dependent on any destination address; and 

7 in response to detecting failure of the second network element, replacing the second 

8 network element with the third network element in the secure network connection with the first 

9 network element, wherein the secure network connection between the first network element and 
10 the third network element is based on the duplicated security association. 

1 11. (Previously Presented) The method according to claim 10 further comprising sending at 

2 least one secure message from the third network element to the first network element to notify 

3 the first network element that the secure network connection will be taken over by the third 

4 network element. 

1 12. (Currently Amended) A method for maintaining secure network connections, the method 

2 comprising: 

3 configuring a plurality of security gateways such that a lookup of security associations is 

4 not dependent on any destination address; and 

5 sharing at least on e a_security association among the plurality of security gateways. 
1 13. (Cancelled) 

1 14. (Previously Presented) The first security server according to claim 22, wherein a lookup 

2 of security associations is not dependent on any destination address. 
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1 15.-16. (Cancelled) 

1 17. (Previously Presented) The first security server according to claim 22, wherein 

2 communications between the mobile client and the first security server are based on a security 

3 architecture for the internet protocol (IPsec). 



1 18.-19. (Cancelled) 

1 20. (Previously Presented) The method of claim 10, further comprising: 

2 during life of the secure network connection between the first and second network 

3 elements, the third network element receiving information relating to the security association of 

4 the secure network connection from the second network element. 

1 21 . (Previously Presented) The method of claim 20, wherein the first network element is a 

2 mobile client, and the second and third network elements are security servers. 

1 22. (Previously Presented) A first security server comprising: 

2 a transceiver to receive information relating to at least one security association of a secure 

3 network connection between a mobile client and a second security server; and 

4 a processor module to: 

5 monitor operation of the second security server; 

6 in response to detecting failure of the second security server, send a message to 

7 the mobile client that the first security server is taking over the secure network connection; and 

8 communicate with the mobile client using the at least one security association 

9 over the secure network connection between the first security server and the mobile client. 

1 23. (Previously Presented) The method of claim 10, wherein the first network element is a 

2 mobile client, and the second and third network elements are security servers. 
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1 24. (Previously Presented) The first security server of claim 22, wherein information relating 

2 to the at least one security association is duplicated at the first and second security servers. 

1 25. (Currently Amended) The method of claim 12, wherein sharing the at least one security 

2 association comprises sharing an IPsec security association among the plurality of security 

3 gateways. 
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